Privacy Policy for Material Explorers

1. The Information We Collect (And Why We Collect It)

We only collect data that is necessary to power the Graax workflow you use. The data falls into three distinct categories:

• Your Material Archive Content: This includes all photos you capture of materials, custom tactile tags you add to sample cards, category labels you create, side-by-side comparison histories, and mood boards you build. This content is stored exclusively to sync your library across your devices, power your search/filter workflows, and enable the sharing/export features you choose to use. You retain full ownership of all original content you upload to Graax.
• Optional Usage Data: If you opt in to anonymous feature usage tracking, we collect aggregated, de-identified data about how you interact with Graax features (for example: how often you use the 4-sample comparison view, what material categories you filter for most often). This data is only used to improve product features, and is never linked to your personal account or content library. You can toggle this tracking off at any time in your settings without losing access to any core Graax functionality.
• Account Information (If You Choose To Create One): If you sign up for a Graax account to sync your library across devices, we only collect your email address and encrypted password. We will never ask for additional personal information (like your full name, address, or phone number) to use core Graax features.

2. How We Handle Shared Content

When you choose to share a sample card, comparison view, or mood board with other people, we generate a temporary, encrypted access link for the content you select. You can control the access rules for all shared content:

• Set custom expiration dates for share links, from 24 hours to unlimited access
• Add password protection to sensitive shared content
• Revoke access to any shared link at any time, which immediately removes access for all previous recipients

Shared content is never indexed or made visible to the general public, and is only accessible to people who have the exact link you share (and password if you set one).

3. Your Full Control Over Your Data

We built Graax to be your tool, so you have complete authority over all content and data associated with your use of the platform:

• Export your entire material library at any time in full, original resolution, with all tags and category data included in a standard open format
• Delete individual samples, mood boards, or your entire account permanently at any time. All content is erased from our active servers within 72 hours of deletion, with no residual backups kept unless required by applicable regulation.
• Opt out of all optional data collection at any time, with no impact to your ability to use core Graax features
• Request a full report of all data we have associated with your account at any time, free of charge

4. Data Security

We know your material library may include sensitive work product for design projects, research, or commercial work, so we take security seriously:

• All content is encrypted in transit using end-to-end encryption, and stored at rest with multi-layered block encryption
• No Graax employee can access your private content unless you explicitly submit a support request for content recovery, and even then access requires multi-factor verification from you and is logged for audit purposes
• We run independent security audits of our platform every 6 months to identify and fix potential vulnerabilities

5. Third Party Integrations

Graax lets you export content to third party tools (like design software, cloud storage services, or collaboration platforms) if you choose to do so. When you initiate an export to a third party service, only the content you explicitly select to export is shared with that service, and the privacy of that content is then governed by the privacy policy of the third party service you choose. We never share any of your content with third parties without your explicit, active initiation.

6. Policy Updates

We will only update this privacy policy to reflect changes to our product features or applicable regulatory requirements. When we update the policy, we will notify all active users via in-app notification and email 30 days before the new policy takes effect. If you do not agree to the updated policy, you can export all of your content and close your account before the new policy takes effect.

7. Contact Us

If you have any questions, concerns, or requests related to your privacy when using Graax, you can reach our team directly at any time at privacy@graax.app. We respond to all user privacy requests within 3 business days.